Privacy Policy

This Privacy Policy explains how community society (“we”, “us”, or “the seller”), the operator of the teamlabel data annotation platform (the “Service”), collects, uses, discloses, and protects your personal information. community society is the data controller responsible for your personal information collected through the Service.

1. Who we are

The Service is operated and provided by community society. When you subscribe to a paid plan, your order is processed by our online reseller Paddle.com, which is the Merchant of Record for those orders. community society remains the controller of the personal information you provide through your use of the Service, while Paddle acts as a separate controller of the payment and billing information you submit directly to it.

2. Personal data we collect

We collect the following categories of personal information:

• Account data — name, email address, username, and authentication credentials you provide when you create an account.
• Workspace data — projects, datasets, labels, annotations, guidelines, tasks, and review records you and your team create within the Service.
• Usage and telemetry — activity logs, feature usage, device identifiers, IP address, browser type, and interactions with the Service for security, analytics, and product improvement.
• Support communications — messages, attachments, and details you share when you contact our support team.
• Billing data — limited billing identifiers (such as a Paddle customer or subscription reference) needed to link your account to a paid subscription. Full payment details are collected and controlled by Paddle.

3. How we use your personal data

We process your personal information for the following purposes:

• Creating and managing your account and authenticating your access.
• Providing, operating, maintaining, and improving the Service and its features.
• Managing your subscription, plan limits, and workspace membership.
• Detecting and preventing fraud, abuse, and security incidents.
• Providing customer support and responding to your requests.
• Generating aggregated, de-identified analytics to improve the product.
• Complying with our legal and regulatory obligations.

4. Legal basis for processing

Where the GDPR or equivalent privacy laws apply, we rely on the following legal bases: performance of a contract with you (to provide the Service you signed up for), our legitimate interests (such as security, fraud prevention, and product improvement), your consent (where you have given it, such as for optional marketing communications), and compliance with legal obligations.

5. Data sharing and recipients

We do not sell your personal information. We share it with the following categories of recipients:

• Merchant of Record — Paddle, for the sale of the product, subscription management, payments, tax compliance, and invoicing.
• Service providers and subprocessors — including cloud hosting, analytics, error monitoring, and support tooling, each acting on our behalf under appropriate contractual safeguards.
• Professional advisers — such as legal and accounting firms, where necessary to provide advice or meet obligations.
• Authorities — where required by law, court order, or to protect our rights and the safety of others.

6. International data transfers

Your personal information may be processed in countries other than your own, including countries that may not provide the same level of data protection. Where this occurs, we use appropriate safeguards such as standard contractual clauses or rely on an adequacy decision to ensure your information remains protected in line with this policy.

7. Data retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Account and workspace data is kept for the lifetime of your account and is deleted or anonymised within a reasonable period after account closure, unless retention is required by law.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal information, to port your data to another service, and to withdraw any consent you have given. To exercise these rights, contact us using the details below. Where required by law, we will respond within one month.

9. Security

We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit and at rest, access controls, and regular review of our systems. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Cookies

The Service uses essential cookies and similar technologies required for authentication and core functionality. We may also use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings; disabling essential cookies may affect your ability to use the Service.

11. Children’s privacy

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact us

If you have questions about this Privacy Policy or your personal information, contact community society at the support address available on the Help & Support page within your workspace, or through the contact details provided when you signed up.